Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 4 subscribers
  • Views 15850 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Alert on USB data transfer

Edvin

I am looking into ways to trigger an alert with Sophos endpoint security when someone copies more than 10 MB of data to a USB key (either single file, or multiple files).

Is this possible to do with Sophos Endpoint or any other Sophos software?



This thread was automatically locked due to age.
  • 0 in reply to Edvin

    Hello Edvin,

    one of my replies in this rather old thread suggests that once I've thought to remember that in "audit" mode not all events are logged/sent (if this is indeed the case then probably for performance reasons - as the Allow and log mode actually is not intended for strict auditing but only for "getting a picture" of data transfer activity.

    Christian

Unfiltered HTML